Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File: mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier: ZrVOUyct1jkEIsD6BIshctKgxbK7KEZ6PxkYh3NOvcs=
Subject key identifier: 68:66:D1:18:49:01:8F:D4:D2:09:60:24:2B:D1:3D:A7:52:85:14:87
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 0194BD4EBE23DD1D3AE8680EFDC737069A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number: EC
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: N0qByPu3emMo9XfORXwQEiEDLX4.roa (hash: WDWKjOtvs4aBJ9ngAGga+267IwwKrgiGUR6VHAFxV3g=)
2: RoGqfo5WHnk9aJGToptEEJnYgSQ.roa (hash: L10AuIcaDMRz0t+d0kRw1yKzyj6eu5ePd1bWDs52MY4=)
3: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (hash: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=)
4: ffVCJAudGRklTh6J2p53gbRPIvk.roa (hash: DvmrtTZ+4GX+XZD2/G6E6Uk/XxFpGuY4Z0oM1q4ZEeI=)
5: gkNUdTJYKI-HrI5siVhEhSliy48.roa (hash: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=)
6: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: yhlVo48Ms0unxbGmfrGbU6NsombijAPFsZQ5TsAP/pI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:23:dd:1d:3a:e8:68:0e:fd:c7:37:06:9a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=6866d11849018fd4d20960242bd13da752851487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:9d:a4:9b:07:bf:fa:e0:59:72:c8:9f:0a:
7b:18:28:0e:5f:13:1e:d2:3a:39:e4:85:55:f2:a4:
aa:3c:66:9b:48:79:f9:e2:e7:66:d9:61:a7:ec:63:
19:55:6e:fd:ef:fd:3a:31:5a:f1:d5:12:e1:49:d5:
5c:80:d8:58:e1:f6:c2:98:b6:3c:aa:4e:ba:b1:2b:
fc:3a:88:48:84:8d:f2:92:34:ca:cd:cc:db:21:47:
6b:d9:ad:9e:5b:2a:ef:8f:ca:03:0b:ac:66:18:85:
69:6f:e7:f5:58:3f:d1:c4:c0:ec:81:d4:c4:fb:fa:
d1:bc:ea:64:04:6b:8c:c1:15:76:f4:d3:a8:54:82:
07:1a:30:d4:53:48:0e:c3:98:69:cc:24:97:be:be:
96:21:8a:5d:09:a1:c7:fe:7f:29:9f:6b:79:fb:86:
25:43:98:4d:2c:b2:34:36:74:35:bd:39:f1:03:9f:
83:f1:a6:60:96:c3:94:06:6b:09:db:43:f9:71:d5:
fb:f7:35:7f:17:e7:91:2a:6e:14:5b:db:70:e4:b2:
64:05:c1:83:70:95:de:e4:9b:a0:a4:60:cc:df:c8:
fa:07:f3:e8:62:53:8b:69:c5:67:fe:57:eb:85:2c:
16:21:9a:42:72:e8:62:9a:d5:9a:1e:fa:1b:37:cb:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:66:D1:18:49:01:8F:D4:D2:09:60:24:2B:D1:3D:A7:52:85:14:87
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:a2:5a:d3:66:ce:d9:c5:d0:a9:11:df:46:28:cd:b6:6e:
e8:0a:65:f2:56:32:ec:47:2b:79:a9:ac:43:52:8e:46:7a:6c:
ff:a5:ac:41:a1:ad:54:f4:50:46:37:c7:e2:d1:23:49:5d:39:
3a:b1:21:5c:05:44:c9:ac:70:00:bc:91:df:93:89:20:1f:e4:
ba:bd:90:03:19:d6:5f:c4:f0:89:62:87:79:2c:87:8e:44:87:
ec:d2:72:02:f0:71:ce:50:b5:49:19:b8:75:9d:5c:c0:32:44:
f8:14:cd:6e:f4:e7:96:b9:7b:b4:ac:7b:60:e7:57:b7:99:de:
72:53:6b:e2:1d:ac:a3:da:c0:c8:4a:f2:11:cb:53:e3:4f:42:
d0:68:2e:a0:de:04:d7:23:e4:d7:1a:ba:a9:d2:99:6a:00:91:
c9:2e:93:82:b8:6a:d7:c5:06:51:43:f8:1c:40:f4:79:b1:59:
55:2a:03:59:c1:33:1b:f5:f2:b1:c4:4a:8c:f1:ef:d9:e0:57:
72:bf:c5:42:f3:97:ff:6e:0f:bd:fa:b7:a8:d6:1a:c4:3f:90:
13:f1:e3:e1:4b:56:3a:e5:3d:e8:60:0a:77:f5:8d:c9:a2:d1:
8a:06:01:d0:a0:18:c2:d3:6f:cd:01:eb:52:af:07:ab:db:b9:
7b:41:96:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:47 2025 by rpki-client